Skip to content
OpenAdvisories
Medium RLSA-2021:4292 7 CVEs

Moderate: squid:4 security, bug fix, and enhancement update

Published Nov 9, 2021 · Updated Feb 4, 2026

Ecosystem: Rocky Linux

Summary

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

The following packages have been upgraded to a later upstream version: squid (4.15). (BZ#1964384)

Security Fix(es):

* squid: denial of service in URN processing (CVE-2021-28651)

* squid: denial of service issue in Cache Manager (CVE-2021-28652)

* squid: denial of service in HTTP response processing (CVE-2021-28662)

* squid: improper input validation in HTTP Range header (CVE-2021-31806)

* squid: incorrect memory management in HTTP Range header (CVE-2021-31807)

* squid: integer overflow in HTTP Range header (CVE-2021-31808)

* squid: denial of service in HTTP response processing (CVE-2021-33620)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.

Fixed packages 2

ReleasePackageFixed in
Rocky Linux · 8 libecap 0:1.0.1-2.module+el8.4.0+404+316a0dc5
Rocky Linux · 8 squid 7:4.15-1.module+el8.5.0+705+218dec94

Vulnerabilities 7

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1959537
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1962243
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1962246
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1962254
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1962595
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1962597
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1962599